Former Mt. Gox CEO Mark Karpelès says Ledger received multiple reports of malicious hardware implants months before its latest security crisis, including from at least two people who contacted it about tampered devices as early as December 2025. Security researcher Joe Grand says he alerted Ledger on March 4, 2026, about an implant in a Nano X bought from a Lazada Thailand seller that is not listed as an authorized reseller; Ledger acknowledged the findings but did not proactively warn customers. The crisis surfaced on Oct. 9 with crypto losses involving wallets sold through CryptoBilis, a reseller authorized in Southeast Asia, and Ledger confirmed one device contained an unauthorized implant. Ledger declined to comment on Grand's disclosure. Trezor, which Grand also alerted in August 2026 about tampered wallets from unauthorized sellers, says it treats such reports as early warnings.
Summary written by Upside AI from the original article. Read the source for full details.
Original headline: Ledger’s early implant warnings deserved more action, Karpelès says
Read the original on Cointelegraph ↗
Related news
- Trezor Cuts Its Resellers After Ledger Finds Spy Implant in Crypto Wallets
Trezor will end its reseller authorizations on January 1, 2027 and stop shipping new stock to them, calling it a precaution after supply-chain incidents and saying there is no evidence its devices were compromised. The move follows Ledger's Donjon team finding that wallets sold by Southeast Asian reseller CryptoBilis carried a spy implant that captures recovery phrases from the screen and sends them over LTE. Ledger told anyone who bought from CryptoBilis in the past 90 days not to set up their device, while onchain investigator Specter traced more than $86 million in suspected thefts, a figure Ledger says it has not verified. Trezor says CryptoBilis was already off its seller list and that it has received no reports of tampered devices from that retailer. Separately, a ShipMonk data exposure in August affected Trezor customers, with the total put at 80,689 in September, though Trezor says its devices, private keys and wallet backups were not affected.
- Ledger Finds LTE Implant That Stole Recovery Phrases in Suspected $86M Drain
Ledger said its Donjon security team found an unauthorized hardware implant inside signers sold by Southeast Asian reseller CryptoBilis, which reads the 24-word recovery phrase from the screen during setup and sends it over LTE using a provisioned eSIM. Ledger confirmed the implant on one affected user's device on October 10th, and said all confirmed losses so far involve devices bought from CryptoBilis, which has stopped selling Ledger devices. Onchain investigator Specter traced more than $86 million in suspected thefts across Ethereum, Tron and Bitcoin, but Ledger has not verified the number of affected users or total losses. The company told buyers who have not set up their device not to do so and to contact Ledger Support, while those who have should move assets to a new device with a new recovery phrase and report to police. Ledger is also reviewing reports of implants in other devices and locations.
- Ledger implant tests Bitcoin ETFs as safer custodial solutions than hardware wallets
The discovery of an unauthorized hardware implant in a Ledger wallet has reignited debate over whether Bitcoin ETFs are safer than self-custody with hardware wallets. Some blockchain investigators estimate losses from these implants could top $86 million. Analyst Plan B said his 2025 move of Bitcoin holdings into ETFs was right, while 21Shares co-founder Ophelia Snyder noted large holders have been shifting to ETFs for enhanced security, arguing self-custody depends on investors' technical expertise. Blockstream CEO Adam Back said hardware wallets can still be secure but manufacturers need better threat modelling. Jameson Lopp warned investors against a rushed mass migration that could create new central points of failure.
- Ledger says unauthorized implant found in at least one device sold by CryptoBilis
- Early landslide warnings issued for several districts
The National Building Research Organisation (NBRO) has issued landslide early warnings for several districts, valid for 24 hours from 9.00 p.m. on Oct. 15 to 9.00 p.m. on Oct. 16. Level 2 – Be Alert covers areas in Nuwara Eliya, Ratnapura, Kegalle, Kurunegala, Matale and Matara districts. Level 1 – Be Vigilant covers areas in Galle, Gampaha, Hambantota, Kalutara and Kandy districts, among others.
Related markets
Latest news
- Saudi Arabia postpones big investor conference to 2027 as Iran-backed Houthis escalate attacks on kingdom
Saudi Arabia has postponed its major annual investor conference until 2027 as Iran-backed Houthi militants escalate missile and drone attacks on the kingdom. The Future Investment Initiative had been scheduled for Riyadh from October 26 to 29. The decision follows a Houthi attack on King Khalid International Airport in Riyadh on October 10, which left at least 12 people dead and more than 300 injured. Organizers said in an email that new dates will be announced soon.
- Russia fires mysterious weapon at Kyiv, shockwaves spread; President Putin appears in rare image, drawing global attention
On the night of 18 Oct, Russia launched a coordinated strike on multiple Ukrainian targets using ballistic missiles, cruise missiles and Geran UAVs, focused on Kyiv. According to TST, around 10 ballistic missiles of the Iskander-M, S-400 or KN-23 types may have been used in the first wave; an above-ground metro station on Kyiv's left bank was reported damaged, disrupting rail and metro services, and videos of blue flashes led observers to suspect a new weapon. In western Ukraine, a 330 kV transformer station near Kovel may have been targeted. Meanwhile, Putin, who rarely appears in military uniform, visited a command post and stressed establishing a “security zone” along the border; blogger Yuri Podolyaka argued Moscow no longer treats these areas as bargaining chips. Front-line correspondent Alexander Kots said the part of Donetsk still controlled by Ukraine is just over 2,700 km².
- Semiconductor Sell-Off: 5 Stocks to Buy on the Dip
The article attributes the semiconductor selloff to investor doubts about the durability of AI infrastructure spending, even as cloud companies report strong demand for AI chips. It highlights five stocks: Nvidia (forward P/E just above 13.5 on fiscal 2028 estimates), Broadcom (custom AI chips, with that revenue expected to quadruple to $230 billion over two years; forward P/E of 11), AMD (riding inference and agentic AI demand), Cerebras Systems (high risk-reward; the company claims 30 times the inference speed of GPUs) and TSMC (forward P/E of 18 on 2027 estimates).
- Tom Lee’s Bitmine Adds $30 Million in Ethereum as Buying Nears Its Finish Line
Bitmine bought another 12,535 ETH (about $30 million), lifting its holdings to 6,041,481 ETH, or 4.9% of supply and 99% of its 5% target. Chairman Tom Lee blamed the crypto selloff on a broad risk-off shift, including AI funding and safety worries, U.S.-Iran tensions, midterm jitters and rising bond yields, and called the dip a historically attractive risk-reward entry. Total holdings reached $15.1 billion as of Oct. 18, including 215 Bitcoin, $582 million in cash and marketable securities, and other investments. About 84% of its ETH (5,067,309 tokens) is staked via its MAVAN platform, with projected annualized revenue of roughly $309 million. The position is currently underwater on paper because much of it was bought at higher prices.
- Opinion: The Most Important Number in Taiwan Semiconductor's Earnings Report Was 68%
The author argues the most important figure in TSMC's Q3 report is 68%, the share of revenue from high-performance computing (HPC), which grew 22% from the prior quarter. Revenue reached $46.72 billion, up 41.2% year over year, net income rose 68.7%, and gross margin hit 66.4%. Processes at 7nm and below made up 79% of wafer revenue, with 3nm at 33% and 2nm at 8%. TSMC guided Q4 revenue to $52.3–54.3 billion and expects roughly 44% full-year growth in U.S. dollars. The author remains bullish, saying ongoing demand for advanced AI chips should keep profits rising.
- Why Meta's Q3 earnings could be a little hard to interpret
Meta is reporting its third-quarter earnings after the market closes Wednesday, and Yahoo Finance's Brian Sozzi says the report will be hard to interpret. Recent good news on Meta's AI products, including new models and an AI agent, may not appear directly in the results but will likely be discussed on the earnings call. The key uncertainty is how investors will react if Meta raises its capex outlook again: it could be seen as fueling those products, or as overspending on offerings not yet reflected in financials. Sozzi expects the market to give Meta the benefit of the doubt on higher capex, as long as the increase does not shock investors.
Get the briefing on Telegram or Zalo
Join the Upside Telegram channel or Zalo group for the Vietnam stocks and gold briefing at 8:00 and 19:00 (Vietnam time) on trading days, plus a weekly wrap on Saturday morning.